4259 matches found
Oracle Database Server 安全漏洞
Oracle Database Server is a relational database management system from Oracle Corporation USA. This database management system provides data management, distributed processing, and other functions. A security vulnerability exists in Portable Clusterware versions 19.3 through 19.28, 21.3 through...
Moodle GeniAI plugin 安全漏洞
Moodle GeniAI plugin is a large modeling plugin for Moodle open source. A security vulnerability exists in Moodle GeniAI plugin version 2.3.6, which stems from an uncleaned JavaScript embedded in PDF files and could lead to a cross-site scripting attack...
PT-2025-42944
Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 19.3 through 19.28 Oracle Database Server versions 21.3 through 21.19 Oracle Database Server versions 23.4 through 23.9 Description An easily exploitable issue exists within the Portable Clusterware component th...
SUSE CVE-2025-11680
Out-of-bounds Write in unfilterscanline in warmcat libwebsockets allows, when the LWSWITHUPNG flag is enabled during compilation and the HTML display stack is used, to write past a heap allocated buffer possibly causing a crash, when the user visits an attacker controlled website that contains a...
CVE-2025-11896
A flaw was found in Xpdf. A PDF object loop in a CMap, via the "UseCMap" entry leads to an infinite recursion and a stack overflow, resulting in an application crash...
Out-of-bounds Read
Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the lwsupngemitnextline function when the LWSWITHUPNG flag is enabled during compilation and the HTML display stack is used. An attacker can cause a crash or read past a heap-allocated buffer by enticing a user to...
CVE-2025-11680 Out-of-bounds Write in libwebsockets PNG parsing
Out-of-bounds Write in unfilterscanline in warmcat libwebsockets allows, when the LWSWITHUPNG flag is enabled during compilation and the HTML display stack is used, to write past a heap allocated buffer possibly causing a crash, when the user visits an attacker controlled website that contains a...
CVE-2025-11679
CVE-2025-11679 affects warmcat libwebsockets where an out-of-bounds read in lws_upng_emit_next_line can occur if LWS_WITH_UPNG is enabled and the HTML display stack is used, potentially crashing a heap-allocated buffer when a crafted PNG with large height is viewed. Public sources (Fedora, Debian...
EUVD-2025-35044
Cross-site Scripting XSS stored vulnerability in Tawk Live Chat. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by uploading a malicious PDF with JavaScript payload through the chatbot. The PDF is stored by the application and subsequently displayed witho...
EUVD-2025-34911
An arbitrary file upload vulnerability in SigningHub v8.6.8 allows attackers to execute arbitrary code via uploading a crafted PDF file...
CVE-2025-56218
An arbitrary file upload vulnerability in SigningHub v8.6.8 allows attackers to execute arbitrary code via uploading a crafted PDF file...
[SECURITY] Fedora 41 Update: apptainer-1.4.3-1.fc41
Apptainer provides functionality to make portable containers that can be used across host environments...
[SECURITY] Fedora 42 Update: apptainer-1.4.3-1.fc42
Apptainer provides functionality to make portable containers that can be used across host environments...
[SECURITY] Fedora 43 Update: apptainer-1.4.3-2.fc43
Apptainer provides functionality to make portable containers that can be used across host environments...
EUVD-2015-7772
Malware in sbrugna...
EUVD-2013-1867
Malware in sbrugna...
EUVD-2021-22575
Malware in sbrugna...
EUVD-2017-4172
Malware in sbrugna...